Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-22236
HistoryJan 31, 2024 - 7:15 a.m.

Information disclosure

2024-01-3107:15:00
PRIOn knowledge base
www.prio-n.com
4
spring cloud contract
information disclosure
local vulnerability
unsafe permissions
temporary directory
nvd

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution is vulnerable to local information disclosure via temporary directory created with unsafe permissions through the shaded com.google.guava:guava dependency in the org.springframework.cloud:spring-cloud-contract-shade dependency.

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2024-22236